Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!tut.cis.ohio-state.edu!pt.cs.cmu.edu!cadre.dsl.pitt.edu!pitt!unix.cis.pitt.edu!obie.cis.pitt.edu!cmf
From: cmf@obie.cis.pitt.edu (Carl M. Fongheiser)
Newsgroups: comp.unix.questions
Subject: Re: .plan
Message-ID: <19435@unix.cis.pitt.edu>
Date: 5 Sep 89 01:28:56 GMT
References: <61@towernet.UUCP> <1989Aug23.192105.21328@ee.rochester.edu> <2620@trantor.harris-atd.com> <9136@elsie.UUCP>
Sender: news@unix.cis.pitt.edu
Reply-To: cmf@obie.cis.pitt.edu (Carl M. Fongheiser)
Organization: University of Pittsburgh, Computing and Information Services
Lines: 10

In article <9136@elsie.UUCP> ado@elsie.UUCP (Arthur David Olson) writes:
>> Use only trusted applications which filter out the nasty sequences.  
>
>Don't "ls /tmp" since an evil user might give a file an evil name?

That's right!  Everybody knows the only safe way to "ls" /tmp is to pipe
it through "cat -v" :-)

				Carl Fongheiser
				cmf@unix.cis.pitt.edu